Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3830303a3a2f34382d3438203d3e203138363738.roa
File:                     323830303a3331303a3830303a3a2f34382d3438203d3e203138363738.roa (raw, json)
Hash identifier:          zWmKv7EGcJ3NUsmlgEYyfTfG0yB+szL4xEwNy57wp8c=
Subject key identifier:   54:A1:DE:EB:CE:35:15:18:9B:F8:7E:1A:AE:D1:16:16:4E:11:9E:99
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       6E52ACDE36E511A3EE7E9EC2ED2F04CEB50DC873
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3830303a3a2f34382d3438203d3e203138363738.roa
Signing time:             Thu 12 Feb 2026 14:30:10 +0000
ROA not before:           Thu 12 Feb 2026 14:25:10 +0000
ROA not after:            Thu 11 Feb 2027 14:30:10 +0000
asID:                     18678
IP address blocks:        2800:310:800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:52:ac:de:36:e5:11:a3:ee:7e:9e:c2:ed:2f:04:ce:b5:0d:c8:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb 12 14:25:10 2026 GMT
            Not After : Feb 11 14:30:10 2027 GMT
        Subject: CN=54A1DEEBCE3515189BF87E1AAED116164E119E99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fb:ab:46:aa:33:6a:ec:0c:f1:8e:f6:02:a8:
                    08:a1:41:6f:de:0b:94:44:50:15:26:44:cd:8c:4a:
                    96:56:97:ef:2f:e8:dc:83:8d:27:59:7e:54:73:ff:
                    6f:80:89:e8:e2:92:a0:51:a2:68:93:32:bd:bc:30:
                    56:10:f9:ca:cc:10:67:67:c1:ec:66:4d:b3:c3:8e:
                    fa:60:22:d3:0c:f5:2b:3e:b8:27:14:c7:47:62:b0:
                    23:59:b0:05:79:50:ac:df:a5:88:74:79:97:5b:e9:
                    de:28:df:e0:56:e6:06:17:9b:f3:73:25:b0:57:81:
                    21:80:ec:36:7d:3f:61:10:0b:cb:e1:f3:f2:0b:0a:
                    f7:a8:54:ed:af:ce:1f:57:0e:f2:3a:f5:40:70:18:
                    61:3a:2c:84:62:9c:ec:83:d7:ef:7e:db:94:9e:20:
                    4e:90:83:36:0e:a4:6c:3d:5a:8e:92:85:f7:f3:87:
                    bb:88:98:80:6a:5a:23:2e:7d:b9:24:e0:45:8a:b0:
                    60:3c:25:9f:a3:77:7f:77:49:77:aa:3f:d6:f3:0e:
                    eb:8e:86:44:09:89:a9:c5:f3:fc:c3:dc:c5:2f:e3:
                    ee:fe:4b:95:2a:d8:cf:17:e7:de:97:81:ab:32:1d:
                    b9:15:a1:5e:9e:cb:49:94:3a:2c:f7:31:6f:bb:bc:
                    d4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A1:DE:EB:CE:35:15:18:9B:F8:7E:1A:AE:D1:16:16:4E:11:9E:99
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3830303a3a2f34382d3438203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:e3:12:3a:ad:06:88:36:9b:48:13:1d:12:a8:2c:5d:2c:03:
         a1:a6:65:e3:f3:14:28:97:33:65:e0:ce:6c:01:83:38:54:a4:
         17:98:48:7d:d7:98:10:bb:ba:de:0e:ad:ee:1e:94:0b:04:75:
         05:fd:02:f4:13:4a:9d:0c:0f:aa:05:94:a2:33:40:95:94:cc:
         da:75:9c:f7:f7:41:57:29:fa:a2:03:78:fa:cc:fa:1e:21:03:
         25:f8:c8:93:95:c2:e5:1b:96:73:47:96:3d:0b:65:49:2e:ab:
         71:18:db:0f:37:50:46:e7:db:dd:ab:56:cf:e6:2d:8c:0f:c9:
         ad:cc:8f:72:7c:bf:a5:d8:05:08:e6:d9:a4:b9:38:20:7c:8f:
         0d:64:ec:1f:f0:4d:71:9e:9e:0e:2c:40:2f:7a:d3:b0:b9:59:
         6a:39:c2:26:e3:bf:d5:8f:24:51:14:c5:39:48:c8:d8:1c:52:
         e0:3d:96:84:e5:e8:a1:1a:d0:cd:94:e8:1d:34:87:bd:5b:d1:
         01:34:cd:cc:37:37:8b:fb:ac:46:91:06:80:33:7b:95:a1:a8:
         f4:aa:a3:d7:72:e6:dc:20:59:3e:a4:7b:b1:19:65:27:9f:ed:
         bf:29:87:79:2a:83:3c:f4:38:48:92:d9:c3:13:ec:dc:df:da:
         e8:0c:de:76
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUblKs3jblEaPufp7C7S8EzrUNyHMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNjAyMTIxNDI1MTBaFw0yNzAyMTExNDMwMTBaMDMxMTAvBgNV
BAMTKDU0QTFERUVCQ0UzNTE1MTg5QkY4N0UxQUFFRDExNjE2NEUxMTlFOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn+6tGqjNq7AzxjvYCqAihQW/e
C5REUBUmRM2MSpZWl+8v6NyDjSdZflRz/2+AiejikqBRomiTMr28MFYQ+crMEGdn
wexmTbPDjvpgItMM9Ss+uCcUx0disCNZsAV5UKzfpYh0eZdb6d4o3+BW5gYXm/Nz
JbBXgSGA7DZ9P2EQC8vh8/ILCveoVO2vzh9XDvI69UBwGGE6LIRinOyD1+9+25Se
IE6QgzYOpGw9Wo6Shffzh7uImIBqWiMufbkk4EWKsGA8JZ+jd393SXeqP9bzDuuO
hkQJianF8/zD3MUv4+7+S5Uq2M8X596XgasyHbkVoV6ey0mUOiz3MW+7vNThAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUVKHe6841FRib+H4artEWFk4RnpkwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMyMzgzMDMwM2EzMzMxMzAzYTM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzgzNjM3Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AAMQCAAwDQYJKoZIhvcNAQELBQADggEBAGvjEjqtBog2m0gTHRKoLF0sA6GmZePz
FCiXM2XgzmwBgzhUpBeYSH3XmBC7ut4Ore4elAsEdQX9AvQTSp0MD6oFlKIzQJWU
zNp1nPf3QVcp+qIDePrM+h4hAyX4yJOVwuUblnNHlj0LZUkuq3EY2w83UEbn292r
Vs/mLYwPya3Mj3J8v6XYBQjm2aS5OCB8jw1k7B/wTXGeng4sQC9607C5WWo5wibj
v9WPJFEUxTlIyNgcUuA9loTl6KEa0M2U6B00h71b0QE0zcw3N4v7rEaRBoAze5Wh
qPSqo9dy5twgWT6ke7EZZSef7b8ph3kqgzz0OEiS2cMT7Nzf2ugM3nY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:33:13 2026 by rpki-client